Detect Beacon Powerful (Include CobatStrike 4.10 Aha~)
☆21Oct 18, 2024Updated 2 years ago
Alternatives and similar repositories for DetectCobaltStrike
Users that are interested in DetectCobaltStrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Help red teams find opsec processes during engagements☆45Dec 7, 2024Updated last year
- ☆15Jul 13, 2024Updated 2 years ago
- CobaltStrike4.5 Sleeve解密文件，搬砖加一点点修改, 仅作备份使用.☆33Jun 17, 2022Updated 4 years ago
- 小玩具，用来快速检测银狐家族恶意程序，和部分RAT/C2产品☆74Jan 7, 2025Updated last year
- ☆24Dec 18, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆12Feb 28, 2023Updated 3 years ago
- Cobalt Strike Get clipboard plugin☆16Aug 11, 2023Updated 3 years ago
- Language extension for Crystal Palace Specification files☆15Jun 6, 2026Updated 4 months ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆14Dec 30, 2018Updated 7 years ago
- ☆63Apr 4, 2024Updated 2 years ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆73Mar 6, 2026Updated 7 months ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 11 months ago
- CVE-2026-0827 PoC☆19Apr 16, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Feb 28, 2023Updated 3 years ago
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 7 months ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- ☆101Sep 14, 2022Updated 4 years ago
- SharpReg is a simple code set to interact with the Remote Registry service api and is compatible with Cobalt Strike.☆27Apr 12, 2020Updated 6 years ago
- Cobalt Strike beacon parser and crawler☆20Oct 11, 2026Updated 3 weeks ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- ☆43Oct 9, 2023Updated 3 years ago
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆279Jun 18, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆27Apr 24, 2025Updated last year
- MSSQL CLR for pentest.☆56Aug 7, 2023Updated 3 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- Just another useless C2 occupying space in some HDD somewhere.☆24Jul 4, 2023Updated 3 years ago
- Port of Cobalt Strike's Process Inject Kit☆195Dec 1, 2024Updated last year
- Lateral movement with DCOM DLL hijacking☆185Jul 4, 2025Updated last year
- LOLBINs that inject a DLL into a given process ID.☆139Nov 21, 2021Updated 4 years ago
- ☆30Nov 7, 2022Updated 3 years ago
- A simple Sleepmask BOF example☆181Nov 24, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated 2 years ago
- Seven different DLL injection techniques in one single project.☆12May 19, 2020Updated 6 years ago
- Advanced Proxy Switcher & Header Modifier☆27May 23, 2026Updated 5 months ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆33Sep 24, 2025Updated last year
- windows 日志检测工具☆21Jul 3, 2023Updated 3 years ago
- 看起来叫BabyBypass，实际啥都会记一些☆15Sep 10, 2023Updated 3 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year